Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/sXQ7O2YnW99AsoDododz2CGHiQk.roa
File:                     sXQ7O2YnW99AsoDododz2CGHiQk.roa (raw, json)
Hash identifier:          WSNtGpvKO64PHNA3IurK3A4lwvlyyElYybF0arcWN18=
Subject key identifier:   B1:74:3B:3B:66:27:5B:DF:40:B2:80:E8:76:87:73:D8:21:87:89:09
Certificate issuer:       /CN=cc4261880f82f38471a5717b8009c4fbda2df242
Certificate serial:       0A95E5F9
Authority key identifier: CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/sXQ7O2YnW99AsoDododz2CGHiQk.roa
Signing time:             Tue 26 Apr 2022 07:50:48 +0000
ROA not before:           Tue 26 Apr 2022 07:50:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        83.150.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177595897 (0xa95e5f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4261880f82f38471a5717b8009c4fbda2df242
        Validity
            Not Before: Apr 26 07:50:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b1743b3b66275bdf40b280e8768773d821878909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:74:a7:28:07:3c:a1:78:24:9d:a8:3e:c1:12:
                    94:1f:2b:9c:73:e5:ce:ff:e1:a8:5d:c7:3d:9d:18:
                    45:34:57:52:0f:29:9b:60:cf:ae:cf:3f:bd:1d:ea:
                    68:f1:06:22:d5:52:60:5f:fc:35:eb:a9:cb:43:44:
                    ef:4b:45:66:82:36:e9:f7:2f:7b:6c:a1:c1:ea:ac:
                    67:58:8d:c8:9c:fc:13:b3:02:cb:4a:dd:20:be:3f:
                    40:89:fb:d1:4a:a0:0c:e4:fe:77:37:28:60:94:94:
                    ad:21:37:f8:81:1b:67:0e:e2:05:69:23:9a:29:4e:
                    aa:f9:e5:89:c4:a9:75:06:72:df:57:85:aa:b2:62:
                    cf:f5:8a:08:91:17:5b:98:9f:4d:bc:e0:00:17:1c:
                    36:6b:92:14:70:45:9e:bf:3b:05:b7:51:bb:18:5e:
                    90:ac:95:f0:ab:10:45:6d:f0:97:fe:6d:fa:53:71:
                    74:71:1a:98:d9:a3:c1:35:29:51:7d:25:ce:62:80:
                    58:94:ce:a1:b0:3a:f8:d3:5a:c7:40:62:64:41:6e:
                    d1:e2:4d:20:81:45:e1:83:59:e4:a1:82:cf:46:72:
                    68:02:9a:56:e4:51:40:5f:26:f7:cb:fb:0d:5a:d9:
                    51:b7:04:24:dc:ae:ae:76:ae:fd:3c:c6:2e:b4:32:
                    fb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:74:3B:3B:66:27:5B:DF:40:B2:80:E8:76:87:73:D8:21:87:89:09
            X509v3 Authority Key Identifier:
                keyid:CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/sXQ7O2YnW99AsoDododz2CGHiQk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/zEJhiA-C84RxpXF7gAnE-9ot8kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.150.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:30:f7:61:ae:e9:0a:d9:e5:52:92:98:9a:93:09:30:c4:a2:
         f4:fe:a0:63:ed:9b:ee:a8:10:29:1a:18:c0:73:3e:7c:15:67:
         30:36:70:f4:2c:91:8f:6e:6a:35:ea:7e:5a:cc:fb:df:28:cb:
         a5:2e:65:1f:89:68:ed:e9:9b:b5:87:47:7f:e2:28:64:8c:d5:
         6f:58:3f:23:33:e0:fc:40:fd:17:b2:40:2b:42:24:a0:99:f9:
         a3:bd:a5:ee:5d:01:83:68:52:d3:8d:3a:2c:ec:4c:fc:4c:0d:
         8e:16:53:ca:da:eb:08:cb:17:5c:55:2e:29:a7:32:3b:63:24:
         5b:d0:e5:e1:44:bf:99:d9:fb:ff:b4:0c:43:d7:03:01:cb:f9:
         e5:1a:4d:cd:59:a9:ba:f8:05:be:d3:bb:55:cd:23:ca:b0:e6:
         4a:18:ac:c9:7a:47:3d:0d:52:8e:15:a0:66:d6:c6:be:be:c8:
         03:d0:32:75:6b:ba:1f:db:a4:d0:84:74:02:f2:dc:89:ab:72:
         70:da:7b:6a:3e:4d:11:79:55:ef:ab:df:5f:04:0c:03:f9:c6:
         64:f1:87:56:3a:27:98:86:1d:47:64:03:93:fe:81:36:7f:00:
         55:6a:ee:d4:50:68:94:6c:d8:e5:8a:21:e0:35:d7:78:10:17:
         f5:13:64:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:59 2023 by rpki-client on console-fra.rpki-client.org